468
回編集
(→LXC) |
|||
|
$ sudo virsh net-start default
</nowiki>
/etc/nftables.conf
<nowiki>
table inet filter {
iifname "virbr0" udp dport {53,67} accept▼
chain input {
iifname "virbr0" tcp dport 53 accept▼
▲ iifname "virbr0" udp dport {53,67} accept
▲ iifname "virbr0" tcp dport 53 accept
}
chain forward {
iifname "virbr0" accept
oifname "virbr0" accept
}
}
</nowiki>
| |||